Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
File: ERk_jomOtvvRLFPffa0CFUPu_G4.mft (raw, json)
Hash identifier: IixTugucgmVObSzB647Gb29JcQhFrHkdqoXoUyZgvf4=
Subject key identifier: 17:18:A7:3D:F3:C1:20:2E:C0:29:55:3D:B4:ED:C3:A4:7F:E3:69:06
Authority key identifier: 11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
Certificate issuer: /CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Certificate serial: 019D38D3A857D6F816EB6B6D799336D91B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
Manifest number: 0CF6
Signing time: Sun 29 Mar 2026 09:01:28 +0000
Manifest this update: Sun 29 Mar 2026 09:01:28 +0000
Manifest next update: Mon 30 Mar 2026 09:01:28 +0000
Files and hashes: 1: ERk_jomOtvvRLFPffa0CFUPu_G4.crl (hash: 9m/hNShkP1WOGa4kFJdnRSotA/oE6nPDu4BMBA0OFPo=)
2: R54X7zTNG912i2EvC7AKSQH7Vtc.roa (hash: t8SIcyAg5d0NiVmbOss6KTkA5q+y1vbgNzl8dJK1AX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a8:57:d6:f8:16:eb:6b:6d:79:93:36:d9:1b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Validity
Not Before: Mar 29 09:01:28 2026 GMT
Not After : Mar 30 09:01:28 2026 GMT
Subject: CN=1718a73df3c1202ec029553db4edc3a47fe36906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:28:ae:bf:7b:61:d8:68:77:c1:d3:f5:d2:
de:91:f6:ea:a1:98:16:ef:86:86:e1:e6:b9:b6:72:
1d:a7:dc:0c:dc:d5:d0:8e:d5:b2:15:6b:90:71:4d:
46:99:d9:f1:05:ea:cc:81:75:88:56:10:90:ad:c8:
23:2a:7d:ee:45:33:78:45:00:3c:cb:2c:c8:69:d2:
74:db:e2:f1:93:0d:2b:e9:aa:5d:d9:ec:7d:70:71:
e0:d2:fa:90:6d:16:dc:da:69:f6:3b:21:c2:65:b4:
5a:6b:45:2c:e5:ac:6d:b6:7b:3e:05:09:53:91:e2:
37:68:2c:fd:f1:15:c6:6c:94:34:df:e7:8a:0e:5b:
a8:1e:25:6f:6f:5d:f7:43:9b:ad:9a:c1:3a:bb:37:
62:59:a4:91:26:00:7a:40:e1:38:0a:fc:a6:f7:88:
d9:2c:58:4c:29:4c:d1:49:6c:ac:64:99:82:14:a1:
e1:1c:cb:b3:7e:1e:cd:3d:b8:b7:86:47:7b:14:32:
51:6c:97:87:6c:e2:a7:b6:d4:61:bc:d5:6e:77:5e:
ea:63:40:f4:9d:d4:2a:73:37:e4:86:58:af:19:d8:
35:17:b5:5d:b3:28:b8:2a:21:bc:e2:9e:c0:25:6e:
76:06:54:2f:cd:1e:b3:19:01:ef:dc:75:af:31:0d:
a3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:18:A7:3D:F3:C1:20:2E:C0:29:55:3D:B4:ED:C3:A4:7F:E3:69:06
X509v3 Authority Key Identifier:
keyid:11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:62:75:49:69:bd:ad:cb:04:af:fb:cf:e6:ed:4e:8b:62:7c:
9e:da:50:a3:65:94:c2:32:22:03:e3:ea:00:52:78:97:40:84:
70:09:87:46:2f:e6:d4:83:3b:7e:45:c4:cb:20:d0:17:6b:b4:
45:55:90:dc:a3:b2:06:63:af:6e:69:9c:7a:9c:56:a5:2f:bf:
2d:08:49:dc:ad:df:cc:cd:bd:f4:27:22:a2:01:9c:c3:0a:0b:
64:1b:ff:94:fc:db:c1:26:5f:ba:0f:10:d4:99:a5:1e:f7:1f:
59:47:61:67:0f:9a:fb:86:9e:51:41:d2:a3:6e:f5:a4:67:cb:
c9:59:a0:72:7a:f8:af:87:b4:f2:b9:bc:85:54:c1:d2:97:10:
c7:18:eb:ef:c2:28:af:24:b5:5d:45:2c:72:57:e2:3a:7f:15:
31:d8:43:5f:c9:c6:39:8c:1b:63:d1:14:b9:74:d4:5a:9c:a1:
0d:17:36:83:d3:b1:cd:61:d7:5f:32:8d:28:b2:c0:63:81:a5:
20:76:f4:7a:b6:13:2a:fd:9f:48:c8:72:dd:64:f1:bc:f4:94:
e6:cf:8e:42:0c:e2:fe:38:e2:56:d3:7e:7f:d7:3f:27:ee:19:
b4:5d:d4:72:d8:93:f9:4f:5f:06:6b:71:d5:80:83:63:af:c6:
a9:f5:ff:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:46 2026 by rpki-client